Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File:                     Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier:          cSrKmr9jw2XTecGr/Xr1cLXdzkz4O3w2+O9qj+0NjB4=
Subject key identifier:   3E:4E:6E:B6:D3:2C:FD:8F:4B:BD:2D:A1:51:CD:72:29:2D:A7:73:28
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer:       /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial:       019DCD18E6511D1499E40132DEAB60432F73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number:          18E1
Signing time:             Mon 27 Apr 2026 04:00:54 +0000
Manifest this update:     Mon 27 Apr 2026 04:00:54 +0000
Manifest next update:     Tue 28 Apr 2026 04:00:54 +0000
Files and hashes:         1: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: gNdQeoLID7BoPSpj3a15EFKhly9kmKuwhV00DPwMmSY=)
                          2: cfc8AqxUQpHiP5l_Nwt2RxlR31E.roa (hash: l4uppHG903ldqi9DaDNBYospFemwSrJP6nlFEmmwSgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:18:e6:51:1d:14:99:e4:01:32:de:ab:60:43:2f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
        Validity
            Not Before: Apr 27 04:00:54 2026 GMT
            Not After : Apr 28 04:00:54 2026 GMT
        Subject: CN=3e4e6eb6d32cfd8f4bbd2da151cd72292da77328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:58:f1:7b:c7:9a:e3:84:e1:97:b0:aa:cb:
                    72:72:00:ec:ad:2d:98:20:e0:5f:29:a1:79:6b:80:
                    bd:86:9c:d5:7a:21:46:e0:d7:9a:f6:09:22:50:14:
                    c7:4d:40:24:c9:e7:c7:7b:37:b3:21:a9:96:c4:90:
                    5a:bc:ef:49:36:36:0e:fc:64:b1:a8:c6:e2:8d:ae:
                    c4:3d:ac:92:b5:01:fc:1e:1b:10:f5:81:2d:4c:a0:
                    b0:7c:8c:74:a5:fa:37:b0:92:0c:25:17:cc:5c:0d:
                    13:ec:a1:62:31:3d:10:25:c8:85:64:d0:0c:e3:2a:
                    0d:8d:92:82:80:05:d1:14:52:63:f0:0e:18:e4:d9:
                    71:5f:e0:97:7e:d8:9e:f0:13:0d:88:bd:2d:fa:28:
                    63:80:07:e6:05:ea:a1:f9:b2:54:b3:d2:14:86:07:
                    e0:b0:cd:a8:fd:3f:53:3b:cb:ad:5a:c7:45:f3:77:
                    33:71:35:b4:92:49:a8:9b:60:b3:39:d8:50:f5:c9:
                    cc:5a:0c:59:74:8d:92:55:da:e1:2b:ef:4e:b2:a8:
                    a5:56:f3:e3:d7:31:58:cb:8a:9e:91:5c:7a:39:d8:
                    a9:d9:c6:d0:32:1d:1b:60:f8:b9:b5:7e:ce:03:0e:
                    fb:c9:e3:19:73:12:9a:2e:bd:93:f2:49:1a:3a:d0:
                    11:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4E:6E:B6:D3:2C:FD:8F:4B:BD:2D:A1:51:CD:72:29:2D:A7:73:28
            X509v3 Authority Key Identifier:
                keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:54:86:b2:44:2c:64:e4:03:b3:78:a6:1c:11:7b:4b:ad:ad:
         56:cb:e9:ac:ac:8d:2b:5c:83:98:38:e5:7a:dd:91:04:10:3a:
         6c:2d:a4:87:c4:32:36:47:ef:35:39:e1:07:44:30:78:41:67:
         c8:c5:cd:31:63:08:48:ba:9f:41:36:f0:10:f9:da:e3:58:01:
         3e:47:4c:de:a0:d2:73:2d:bb:b5:46:c6:9a:de:0f:40:e6:7d:
         2c:2e:c6:44:2d:8b:4e:e0:fe:55:b2:f6:e2:4a:99:8c:b4:63:
         51:68:cb:67:d7:ff:67:1d:51:16:b4:70:8d:20:67:7b:2e:b4:
         8b:e6:12:90:c2:31:bc:52:a3:8d:8b:df:1b:b4:8d:5f:b7:b8:
         0e:5b:f4:38:29:30:01:14:b4:83:18:28:d2:b6:cb:37:2e:26:
         b9:f8:70:00:2c:bd:af:cb:a4:10:14:aa:89:25:8b:50:a3:34:
         af:5d:45:57:fe:63:89:6e:54:25:d1:5f:eb:cc:15:0c:39:37:
         70:62:0f:9a:d5:b2:dc:e8:00:29:4c:e9:9b:e1:81:a9:d6:ed:
         64:23:21:6d:fa:aa:d0:40:ac:7f:fb:a4:a4:ed:ff:76:39:d4:
         08:43:a2:21:97:19:6c:bc:ae:ea:dc:e1:36:17:5f:ca:a4:64:
         ea:0c:db:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:00:13 2026 by rpki-client